Incorrect Authorization

magento/project-community-edition is vulnerable to Incorrect Authorization. The vulnerability is due to improper access control checks, which allows an attacker with low privileges to bypass security mechanisms and gain unauthorized access without requiring user interaction...

SQL Injection

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. An attacker can execute arbitrary code by injecting SQL...